fix: package.json & yarn.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-COOKIE-8163060

package.json

@@ -62,11 +62,11 @@
     "@types/underscore": "^1.8.9",
     "amqplib": "0.5.3",
     "apollo-datasource-rest": "^0.5.1",
-    "apollo-server-express": "^2.9.7",
+    "apollo-server-express": "^3.13.0",
     "aws-sdk": "^2.151.0",
     "bcryptjs": "^2.4.3",
-    "cookie": "^0.4.1",
-    "cookie-parser": "^1.4.3",
+    "cookie": "^0.7.0",
+    "cookie-parser": "^1.4.7",
     "cors": "^2.8.1",
     "cote": "^1.0.0",
     "csvtojson": "^2.0.10",
@@ -76,7 +76,7 @@
     "erxes-inmemory-storage": "^1.0.16",
     "erxes-message-broker": "^1.0.17",
     "erxes-telemetry": "^1.0.4",
-    "express": "^4.17.1",
+    "express": "^4.21.1",
     "faker": "^4.1.0",
     "file-type": "^10.4.0",
     "firebase-admin": "^8.6.1",